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CLAIMS 




What is claimed is: 

1 . A method in a data processing system for maintaining security during booting of the 
data processing system, said method comprising: 

during a boot process, interrogating a boot device for password information; and 



4 in response toVthe boot device supplying passv^ord information corresponding to that 

□ 5 of a trusted boot deviae, booting the data processing system utilizing the boot device. 
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1 2. The 

2 least a serial 



methbd according to Claim 1, wherein said password information includes at 
nunlber of the boot device. 



1 3. The methdd 

2 password informat 



according to Claim 1, wherein interrogating said boot device for 
on comprises startup software interrogating the boot device. 



1 4. The method 

2 password informa 

3 according to a prior 

4 to that of a trusted 



according to Claim 1, wherein interrogating said boot devices for 
ion comprises interrogating a plurality of boot devices in sequence 
ty order until a boot device supplies password information corresponding 
)oot device. 



1 5. The method according to Claim 1, and further comprising: 



storing a password in non- volatile storage of the data processing system; and 



3 determinin; 

4 to a trusted boot 

5 comparing the hash 



that said boot device has supplied password information corresponding 
device by hashing password information supplied by the boot device and 
d password information with the stored password. 
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6. The method according to Claim 5, and fiirther comprising obtaining said password 
by interrogating the; boot device for the password information with a password-protected 
configuration routii le. 
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A data processing system comprising: 



a boot device; 



a processor; anc 



memory coupled to said processor for communication, said memory including startup 
software that, when ex xuted by said processor during a boot process, interrogates the boot 
device for password information and, responsive to the boot device supplying password 
information corresponding to that of a trusted boot device, boots the data processing system 
utilizing the boot device. 
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8. The 

at least a serial number 



data processing system of Claim 7, wherein said password information includes 
of the boot device. 



9. The data proces sing system of Claim 7, said data processing system having a plurality 
of boot devices includ ng the boot device, wherein said startup software interrogates said 
plurality of boot devices for password information in sequence according to a priority order 
until a boot device su )plies password information corresponding to that of a trusted boot 
device. 



proce!;sm 



10. The data 
that stores a password, 
supplied password 
information supplied 
with the password 



ing system of Claim 7, and fiirther comprising non- volatile storage 
wherein said startup software determines that said boot device has 
information corresponding to a trusted boot device by hashing password 
y the boot device and comparing the hashed password information 
stoijed in non- volatile storage. 



1 11. The 

2 protected configuratioi . 

3 for the password information 



data processing system of Claim 1 0, said startup software including a password- 
routine that obtains said password by interrogating the boot device 
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12. A program product comprising: 



able medium; and 



a computer us 



startup software encoded within said computer usable medium, wherein said startup 
software causes a data processing system to interrogate the boot device for password 
information during a boot process and, responsive to the boot device supplying password 
information corresponding to that of a trusted boot device, to boot the data processing system 
utilizing the boot device. 
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13. The program product of Claim 12, wherein said password information includes at 
least a serial numbjer of the boot device. 



1 4. The prograrii product of Claim 1 2, said data processing system having a plurality of 
boot devices including the boot device, wherein said startup software causes the data 
processing system tD interrogate said plurality of boot devices for password information in 
sequence according; to a priority order until a boot device supplies password information 
corresponding to that of a trusted boot device. 



15. Theprograi^ 
boot device has sui 
hashing password 
password informati|)n 
system. 



product of Claim 12, wherein said startup software determines that said 
f plied password information corresponding to a trusted boot device by 
information supplied by the boot device and comparing the hashed 
with a password stored in non- volatile storage of the data processing 



16. The progran 
protected configurat 
for the password infdrmation 



product of Claim 15, said startup software including a password- 
Ion routine that obtains said password by interrogating the boot device 



